Schriever Cyber Threat Intelligence Software
Closed Pre-Solicitation Posted
Not the latest version. See the latest pre-solicitation from .
- Solicitation number
- FA255026AC002
- Agency
-
Air Force Space Command
Air Force, Department of Defense
- Responses due
- Set-aside
- No set-aside
Opportunity facts
- NAICS code
- 541511 Custom Computer Programming Services
- Place of performance
- Colorado Springs, Colorado 80912, United States
Notice details come from SAM.gov. Updated .
About this opportunity
Air Force Space Command is conducting market research for a secure, high-fidelity network flow analytics platform to support Schriever cyber threat intelligence operations, with responses due by September 24, 2026. This is a sources-sought notice only; no quotes will be evaluated at this time.
The required platform must deliver Netflow telemetry querying against a global network flow database with filtering on source/destination IP addresses, ports, protocol types, packet counts, and timestamps. The system must enable threat infrastructure tracking including C2 server tracing, botnet mapping, and hostile infrastructure analysis. Integrated passive DNS and IP reputation capabilities must allow rapid context resolution of suspect nodes. The platform must profile encrypted traffic to identify anomalous patterns and detect threat actors using VPNs or encrypted tunneling.
The solution must be a secure, web-based software platform with 24/7/365 availability and API endpoints for direct integration into the unit's local security tools, SIEM systems, and data orchestrators. Operations and maintenance support must include ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance period at no additional cost, along with 24/7 helpdesk and administrator support for troubleshooting, configuration assistance, and platform optimization.
NAICS 541511 (Custom Computer Programming Services); PSC DJ10 (IT and Telecom—Security and Compliance as a Service).
Notice text
This is a new requirement for a secure, high-fidelity network flow analytics platform. The system must meet or exceed the following technical capabilities:
Netflow Telemetry Querying: Provide access to a massive, global network flow database with the ability to run targeted queries on source/destination IP addresses, ports, protocal types, packet counts, and timestamps.
Threat Infrastructure Tracking: Enable users to trace malicious command and control (C2) servers, map botnets, analyze hostile infrastructure, and perform forensic attribution.
Passive DNS & IP Reputation: Integrated access to historical passive DNS databases and IP threat scores to quickly context-resolve suspect nodes.
Encrypted Traffic Profiling: Capabilities to identify and analyze anomalous traffic patterns and identify threat actors utilizing virtual private networks (VPNs) or encrypted tunneling.
Secure, web-based software platform with 24/7/365 availability.
API endpoints for integrating intelligence feeds directly into the unit'slocal security tools, Security Information and Event Management (SIEM) systems, or data orchestrators.
Operations & Maintenance Support:
• Software Updates: Ongoing platform upgrades, database maintenance, search engine optimization, and feature additions throughout the performance periods at no extra cost.
• Technical Support: Helpdesk and administrator support for user troubleshooting, configuration assistance, and platform optimization
This posting is a Sources Sought only for market research, no quotes will be evaluated at this time.
Notice history
| Notice | Type | Posted |
|---|---|---|
| Schriever Cyber Threat Intelligence Software | Pre-Solicitation | |
| This notice | Pre-Solicitation |
Similar open opportunities
| Opportunity | Agency | Set-aside | Responses due |
|---|---|---|---|
| Communications, Network, Engineering, Cybersecurity, and Information Technology Services (CNECTS), aka "Connects" | Air Force Space Command | Total Small Business | |
| Sources Sought - Cross-Domain Capabilities | ACC Aberdeen Proving Ground | No set-aside | |
| FLOW Market Survey | Office of the Director of National Intelligence | No set-aside | |
| Commercial Solutions Opening (CSO) for Space Domain Awareness (SDA) Solutions. | Air Force Space Command | No set-aside | |
| Simulator Common Architecture Requirements and Standards (SCARS) | Aeronautical Systems Center | No set-aside |
On GovTribe
Work this opportunity
- Track it in your pipeline
- Find teaming partners
- Similar opportunities
- Ask GovTribe AI about this opportunity